c19efdb4d25e031a9f4a6f3dec7f6d05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c19efdb4d25e031a9f4a6f3dec7f6d05
Size

119KB
MD5

c19efdb4d25e031a9f4a6f3dec7f6d05
SHA1

603b34aa264a5b4c648bc03bc3750fe09594eede
SHA256

79ee4521d61d431a121b4ce4ad4581c627fd3b1e58baaf878a33e7b8df81eb04
SHA512

d9d3400c44850c7293645c4862dc5fd77593bb324421fa78c82d1bbb71076b0e97ce3c6cb1fbbf53ec540822a0d623dc8d4e79d34bcf8ef5630b9c7f375b28ad
SSDEEP

3072:/iwQo9+e2V6aVQyQPqr+41S6C0VlopeoxQ0crn4Q31cesAk7O:/iS9+tV6aQqrvpoepHcesAk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c19efdb4d25e031a9f4a6f3dec7f6d05

Files

c19efdb4d25e031a9f4a6f3dec7f6d05
.exe windows:4 windows x86 arch:x86

4f800bf649872261491b4e7ca2960346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
SetFileTime
LocalFileTimeToFileTime
FreeLibrary
CreateFileA
LoadResource
GetProcAddress
GetTickCount
OutputDebugStringA
LoadLibraryA
UnmapViewOfFile
GetLastError
GetFileSize
MapViewOfFile
CreateFileMappingA
GetCurrentProcess
GetCurrentThread
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

sprintf
strcat
memcpy
strlen
fclose
fwrite
fopen
_access
memset
strcpy
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fread

shlwapi

PathFileExistsA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ